Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/950FB0F4473811EE8868A8574AD9E6FC.roa
File: 950FB0F4473811EE8868A8574AD9E6FC.roa (raw, json)
Hash identifier: /PjkiaUWzcFQZbPAnJlUD54OUuAzTf1whVnfWim7Zcw=
Subject key identifier: B5:D2:B8:89:07:1B:3F:F5:EB:55:83:0B:75:1B:5D:F0:FB:E5:FB:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3AE5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/950FB0F4473811EE8868A8574AD9E6FC.roa
Signing time: Wed 30 Aug 2023 13:24:44 +0000
ROA not before: Wed 30 Aug 2023 13:24:41 +0000
ROA not after: Thu 08 Aug 2024 13:24:41 +0000
asID: 133199
IP address blocks: 154.204.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15077 (0x3ae5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 30 13:24:41 2023 GMT
Not After : Aug 8 13:24:41 2024 GMT
Subject: CN=64ef431c-e41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3d:36:bb:a8:ae:04:0b:f1:90:b2:62:67:d1:
38:11:72:4e:22:37:dd:9b:7b:f0:58:18:27:44:4a:
c4:cb:60:f7:7b:ef:78:af:6d:da:47:07:19:42:ff:
3b:48:ed:06:01:6d:91:86:b5:49:95:7c:1e:d4:37:
49:35:a6:08:a6:c2:64:f9:0c:1b:00:ec:92:d5:00:
4f:13:22:b1:84:66:27:a1:40:f2:8d:32:1e:93:81:
d1:44:49:e5:56:45:ae:a6:3a:42:0e:64:5e:f2:db:
1d:ed:e8:a6:56:5a:1f:44:c0:4c:8c:fd:03:81:ea:
69:5c:24:7d:08:1f:df:2f:7d:17:05:81:4c:0c:ee:
ed:e9:24:7e:c9:37:01:c5:52:e0:b4:92:9c:43:c5:
d2:bd:e1:95:c9:b5:79:55:1a:12:31:b7:12:1d:22:
95:03:42:de:89:5d:de:f8:2e:69:26:5c:f9:82:7a:
42:17:b0:3f:90:4b:ba:a9:5e:88:e7:d4:9f:08:6a:
ed:ef:e1:fb:95:2c:3b:7c:b7:b3:90:18:42:7d:8d:
ae:cb:2d:91:4e:2a:0b:99:f7:63:85:6f:05:a8:b7:
72:62:89:15:7a:e5:b2:24:7a:86:1a:7c:aa:6f:43:
a1:82:32:16:26:1f:7c:ce:d5:ea:f8:d5:68:82:a2:
f9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D2:B8:89:07:1B:3F:F5:EB:55:83:0B:75:1B:5D:F0:FB:E5:FB:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/950FB0F4473811EE8868A8574AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.39.0/24
Signature Algorithm: sha256WithRSAEncryption
54:96:5d:cf:b1:b2:d8:40:df:fa:ad:cf:23:e9:01:9d:6b:cd:
aa:49:c9:3a:6e:5c:73:d6:a9:57:59:90:d1:df:ca:8c:4a:8e:
23:6c:a7:37:c7:92:8e:0e:0a:57:c3:a8:c6:11:b6:d9:16:80:
42:12:2c:7c:b8:3f:98:a6:0d:98:c5:33:c7:3e:49:86:b4:ea:
c1:cf:13:ef:38:45:05:d5:95:f4:7f:b4:37:65:f3:de:ee:09:
d7:f5:03:6f:26:33:ff:24:a3:7a:0c:9f:86:cc:9d:d6:ec:fb:
46:cd:2d:54:b7:77:d7:15:ad:20:6a:e6:35:0b:1a:a5:32:71:
f4:7b:49:72:c3:11:90:e2:b8:ad:ff:e3:c7:7d:c2:5f:5e:07:
18:6a:5d:4b:36:5b:ff:08:2f:9f:67:f9:12:83:36:f6:be:95:
57:cd:f0:6e:ab:6f:3a:1d:40:b4:3e:6a:af:9d:0a:f7:98:64:
50:ef:40:30:be:02:92:53:cf:df:1f:15:eb:af:ac:67:d0:c4:
4b:b7:ed:8b:73:71:75:57:d8:d6:6f:40:5d:0d:38:69:b2:37:
9c:26:d2:f7:0e:dd:83:42:b1:de:77:4b:5a:c1:f0:06:c4:16:
c8:87:df:2c:13:94:fb:13:7e:a8:61:48:e3:5f:c4:57:e1:6d:
9b:d1:2c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:15 2024 by rpki-client on console-ams.rpki-client.org